Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212746.roa
File: AS212746.roa (raw, json)
Hash identifier: E7iWBZ4dDMh/X5R+cQRrwoM0OHyptVYLIOD/Sqzs500=
Subject key identifier: 7A:D9:70:8B:DE:FC:EC:F8:31:48:CD:50:C2:EB:C9:EB:A8:5F:87:C1
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 58B7C558202016FEBDE869AA5A9C120B041C99A4
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212746.roa
Signing time: Sun 01 Jan 2023 23:59:26 +0000
ROA not before: Sun 01 Jan 2023 23:54:26 +0000
ROA not after: Sun 31 Dec 2023 23:59:26 +0000
asID: 212746
IP address blocks: 2a06:a005:1020::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:b7:c5:58:20:20:16:fe:bd:e8:69:aa:5a:9c:12:0b:04:1c:99:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:26 2023 GMT
Not After : Dec 31 23:59:26 2023 GMT
Subject: CN=7AD9708BDEFCECF83148CD50C2EBC9EBA85F87C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:74:28:78:48:56:40:51:55:43:47:d2:df:
1e:cb:25:75:cb:c6:8c:34:c8:55:05:ca:96:ba:75:
72:db:87:4b:60:6c:8d:de:1f:32:2f:86:77:87:0d:
a6:48:92:d7:e9:27:5c:e6:c9:2a:50:80:6a:e0:ba:
dc:de:5e:0a:7c:7f:7d:3a:f0:13:af:f3:dd:3c:26:
04:5b:a5:5c:30:b2:cc:e9:52:1a:13:88:29:f1:e1:
87:68:c0:1c:0a:d5:8e:e4:29:49:2a:91:2a:78:95:
02:1d:f1:62:50:97:8c:c8:52:e8:7f:21:40:15:d3:
3f:01:0d:af:19:e5:11:fe:1d:13:1f:fd:73:04:b3:
96:ef:f9:a8:65:af:79:9e:e5:47:30:d8:9e:c1:c1:
6c:b8:a4:f0:12:49:47:bb:79:1b:fe:54:ed:9d:01:
d5:a4:8a:ed:20:e6:3f:aa:d5:aa:ce:fb:a6:7c:83:
ce:9e:13:c2:c8:7f:f1:ab:5d:bf:4a:b4:58:fe:45:
a3:d5:13:bf:0a:7b:e0:83:66:b9:be:b5:b9:a4:5f:
1e:55:78:8e:3d:4b:0a:22:71:bf:21:70:57:2e:59:
c1:e0:fa:10:c7:14:54:b1:9e:2c:36:16:bc:a5:3f:
2c:11:03:1a:5b:c9:1e:9e:be:c9:83:2c:37:b8:ec:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D9:70:8B:DE:FC:EC:F8:31:48:CD:50:C2:EB:C9:EB:A8:5F:87:C1
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1020::/44
Signature Algorithm: sha256WithRSAEncryption
06:a8:ab:7c:03:5e:6d:a6:5a:8f:1d:d0:d5:f7:60:29:db:85:
2a:cc:28:09:b1:33:d6:cc:89:d4:cb:16:b8:76:25:2f:f9:87:
13:71:7e:47:d5:3a:7f:da:99:8d:c5:dd:11:a5:5e:e6:15:33:
3d:94:4f:ff:2e:41:50:b4:90:e1:1e:b5:81:b7:58:e7:e7:43:
b6:55:eb:b0:61:5e:b7:14:1b:6e:3a:63:ea:92:00:a6:d0:87:
ef:ba:31:70:bf:14:93:23:f6:e8:f3:dc:f3:e1:1e:70:cd:2f:
0b:18:1c:96:8d:fd:ca:c6:6b:38:79:bd:d6:79:84:0f:24:bd:
13:22:c7:f0:5b:91:12:8b:75:4e:1b:52:0a:9e:d1:60:84:50:
b9:c0:5c:23:3f:26:01:ea:61:f7:4e:e6:a6:c4:8a:a1:50:c1:
ef:bf:a8:b7:4c:6b:0e:2a:c5:80:16:03:de:b9:1d:e6:f0:73:
c2:aa:4f:bb:e3:cb:3a:32:49:d5:cf:b6:5b:be:da:95:a4:ff:
f8:33:27:ed:33:f8:6a:8c:03:98:2e:cb:4a:06:67:29:79:c3:
a5:3c:5b:74:5c:d0:87:73:6a:7d:f5:9f:7c:63:ee:ee:e8:5d:
dd:12:f9:be:91:04:b1:e5:ae:01:ff:fc:8f:ac:80:4c:d7:44:
b8:49:da:71
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUWLfFWCAgFv696GmqWpwSCwQcmaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjZaFw0yMzEyMzEyMzU5MjZaMDMxMTAvBgNV
BAMTKDdBRDk3MDhCREVGQ0VDRjgzMTQ4Q0Q1MEMyRUJDOUVCQTg1Rjg3QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxw3QoeEhWQFFVQ0fS3x7LJXXL
xow0yFUFypa6dXLbh0tgbI3eHzIvhneHDaZIktfpJ1zmySpQgGrgutzeXgp8f306
8BOv8908JgRbpVwwsszpUhoTiCnx4YdowBwK1Y7kKUkqkSp4lQId8WJQl4zIUuh/
IUAV0z8BDa8Z5RH+HRMf/XMEs5bv+ahlr3me5Ucw2J7BwWy4pPASSUe7eRv+VO2d
AdWkiu0g5j+q1arO+6Z8g86eE8LIf/GrXb9KtFj+RaPVE78Ke+CDZrm+tbmkXx5V
eI49Swoicb8hcFcuWcHg+hDHFFSxniw2FrylPywRAxpbyR6evsmDLDe47PBFAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUetlwi9787PgxSM1QwuvJ66hfh8EwHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjEyNzQ2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgag
BRAgMA0GCSqGSIb3DQEBCwUAA4IBAQAGqKt8A15tplqPHdDV92Ap24UqzCgJsTPW
zInUyxa4diUv+YcTcX5H1Tp/2pmNxd0RpV7mFTM9lE//LkFQtJDhHrWBt1jn50O2
VeuwYV63FBtuOmPqkgCm0IfvujFwvxSTI/bo89zz4R5wzS8LGByWjf3Kxms4eb3W
eYQPJL0TIsfwW5ESi3VOG1IKntFghFC5wFwjPyYB6mH3TuamxIqhUMHvv6i3TGsO
KsWAFgPeuR3m8HPCqk+748s6MknVz7ZbvtqVpP/4MyftM/hqjAOYLstKBmcpecOl
PFt0XNCHc2p99Z98Y+7u6F3dEvm+kQSx5a4B//yPrIBM10S4Sdpx
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:30 2025 by rpki-client